dhcp snooping alarm threshold

Function

The dhcp snooping alarm threshold command sets the alarm threshold for discarded DHCP packets.

The undo dhcp snooping alarm threshold command restores the default configuration.

By default, the alarm threshold is 100.

Format

dhcp snooping alarm threshold threshold-value

undo dhcp snooping alarm threshold

Parameters

Parameter	Description	Value
threshold threshold-value	Specifies the alarm threshold for discarded DHCP packets.	The value is an integer ranging from 1 to 1000, in packets.

Parameter

Description

Value

threshold threshold-value

Specifies the alarm threshold for discarded DHCP packets.

The value is an integer ranging from 1 to 1000, in packets.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
dhcp	write

Usage Guidelines

Usage Scenario

After DHCP packet check is enabled, the device checks the validity of received DHCP packets and discards invalid DHCP packets. You can also configure the alarm function for discarded DHCP packets and the alarm threshold for discarded DHCP packets. You can configure the following detection functions of DHCP packets:

Binding table check for ARP packets: The ARP packets mismatching information in the binding table are dropped.
Binding table check for DHCP request packets: The DHCP request packets mismatching information in the binding table are dropped.
Binding table check for IP packets: The IP packets mismatching information in the binding table are dropped.
CHADDR field check: The DHCP packets with the CHADDR field value mismatching the MAC address in the packet header are dropped.

Prerequisites

DHCP snooping has been enabled globally by running the dhcp snooping enable command.

Precautions

This command applies to the system view. The dhcp snooping alarm threshold (BD view), dhcp snooping alarm threshold (interface view) and dhcp snooping alarm threshold (VLAN view) commands apply to the BD view, interface view and VLAN view, respectively. If the dhcp snooping alarm threshold command is not run in the BD, interface or VLAN view, the alarm threshold configured in the system view takes effect in the BD, interface and VLAN view.

Example

# Set the alarm threshold for discarded DHCP packets to 200.

<HUAWEI> system-view
[~HUAWEI] dhcp snooping enable
[*HUAWEI] dhcp snooping alarm threshold 200